Archive
December 2009
Vulnerabilities first published in this month (UTC), newest first.
440 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the OpenSocial Shindig-Integrator module 5.x and 6.x before 6.x-2.1, a modu…
-
Unscored —
Multiple unspecified vulnerabilities in Ortro before 1.3.4 have unknown impact and attack vectors.
-
Unscored —CVE-2009-4523 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2009-4522 Public exploit
Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitra…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Insert Node module 5.x before 5.x-1.2 for Drupal allows remote attacker…
-
Unscored —CVE-2009-4512 Public exploit
Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remote attacke…
-
Unscored —CVE-2009-4531 Public exploit
httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . (dot) charac…
-
Unscored —
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows …
-
Unscored —
Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attack…
-
Unscored —CVE-2009-4521 Public exploit
Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT)…
-
Unscored —
The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to by…
-
Unscored —
InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page v…
-
Unscored —CVE-2009-4535 Public exploit
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) ch…
-
Unscored —
The CCK Comment Reference module 5.x before 5.x-1.2 and 6.x before 6.x-1.3, a module for Drupal, allows remote attacker…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Workflow module 5.x before 5.x-2.4 and 6.x before 6.x-1.2, a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for …
-
Unscored —
The Send by e-mail sub-module in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.9 and 6.x bef…
-
Unscored —
The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, does not prevent caching of a page t…
-
Unscored —
The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for Drupal, does not properly …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.9 …
-
Unscored —
The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, whi…
-
Unscored —
The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via…
-
Unscored —CVE-2009-4499 Public exploit
SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6…
-
Unscored —CVE-2009-4501 Public exploit
The zbx_get_next_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows remote attackers to cause …
-
Unscored —
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote at…
-
Unscored —
The process_trap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial …
-
Unscored —
Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows remote attackers to inj…
-
Unscored —CVE-2009-4477 Public exploit
SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Buffer overflow in MediaServer.exe in TVersity 1.6 allows remote attackers to execute arbitrary code via unspecified ve…
-
Unscored —
Unspecified vulnerability in LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (daemon …
-
Unscored —CVE-2009-4475 Public exploit
SQL injection vulnerability in the Joomlub (com_joomlub) component for Joomla! allows remote attackers to execute arbit…
-
Unscored —
LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (heap memory corruption and daemon cr…
-
Unscored —
Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code v…
-
Unscored —CVE-2009-4470 Public exploit
SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2009-4471 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute ar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET…